CVE-2022-48372

CVE-2022-48372 affects the bootcp service in UNISOC chipsets, caused by a missing bounds check that enables an out-of-bounds write. The documented impact is local denial of service with System execution privileges required; attack is local and requires high privileges, with no user interaction. A...

CVE-2023-20675

CVE-2023-20675 concerns MediaTek platforms where the kernel/wlan component is vulnerable to an out-of-bounds read caused by a missing bounds check. The issue can lead to local information disclosure, with potentially full System privileges if exploited, and does not require user interaction. Conn...

CVE-2023-20723

Summary of CVE-2023-20723 : A Bluetooth vulnerability in MediaTek-based devices allows an out-of-bounds read due to a missing bounds check, enabling local escalation of privilege with System execution privileges required. Exploitation is described as local with no user interaction needed; the ent...

CVE-2023-33911

CVE-2023-33911 affects the vowifi service in UNISOC-based environments. Root cause: a missing permission check leading to local information disclosure without additional execution privileges. Impact: confidentiality breach (local access, high impact) without integrity or availability impact per t...

CVE-2023-35691

Technical details about CVE-2023-35691 are not publicly provided in the supplied documents. No concrete affected products, versions, or remediation are present. Monitor for updates.

CVE-2023-40633

CVE-2023-40633 describes a vulnerability in the phasecheckserver where a missing permission check could allow local information disclosure without requiring additional execution privileges. Supported by multiple sources (NVD entry, CVE records, and related enrichments), the flaw is characterized ...

CVE-2023-40654

CVE-2023-40654 affects FW-PackageManager due to a missing permission check, enabling local privilege escalation with System execution privileges. Public references describe the issue across multiple feeds (NVD, Red Hat, PRION, CVE list, CNNVD, PT-Security) but do not provide a product version or ...

CVE-2024-20084

CVE-2024-20084 affects MediaTek power components. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with System execution privileges required; exploitation is not user-initiated. Patch ALPS08944210 is noted (Issue MSV-15...

CVE-2024-20127

MediaTek Chipsets are affected by a security vulnerability in the Telephony component caused by a missing bounds check . This flaw leads to an out-of-bounds read , which can be exploited to cause a remote denial of service . No additional execution privileges or user interaction are required for ...

CVE-2025-22424

CVE-2025-22424 is described across multiple sources as an Android vulnerability arising from improper input validation that can cause images to be revealed across users, enabling local privilege escalation with no extra execution privileges. The NVD entry assigns a CVSS v3.1 base score of 7.8 (Hi...

CVE-2026-0106

The Android VPU driver is vulnerable to an Elevation of Privilege (EoP) flaw in the vpu_ioctl function, specifically within the vpu_mmap component. Due to a missing bounds check , an attacker can perform an arbitrary address mapping , which may allow for arbitrary read/write access to the kernel ...

CVE-2011-2344

The CVE concerns Android Picasa in Android 3.0 and 2.x through 2.3.4, where authToken is transmitted over cleartext HTTP from ClientLogin. This allowed remote attackers to sniff tokens from connections to picasaweb.google.com, enabling privilege escalation to access private pictures and web album...

CVE-2013-3666

CVE-2013-3666 affects LG’s Hidden Menu component on Android for the LG Optimus G E973. The vulnerability allows physically proximate attackers to execute shell commands by entering USB Debugging mode and using adb to establish a USB connection, dialing 3845#*973#, navigating to WLAN Test > Wi‑...

CVE-2014-6060

CVE-2014-6060 describes a denial-of-service condition in the DHCP client dhcpcd. Affected versions are 4.0.0 through 6.x (before 6.4.3). The root cause is a vulnerability in how a remote DHCP server can reset the DHO_OPTIONSOVERLOADED option in the bootfile or servername DHCP option, triggering t...

CVE-2014-9883

CVE-2014-9883 describes an integer overflow in drivers/char/diag/diag_dci.c within the Qualcomm component used by Android on Nexus 5 and Nexus 7 (2013) devices, before the 2016-08-05 patch. The vulnerability could allow a crafted application to gain privileges or access sensitive information. Pub...

CVE-2014-9885

CVE-2014-9885 is a format-string vulnerability in the Qualcomm qpnp-adc-tm.c driver (drivers/thermal) used on Nexus 5 devices running Android versions before 2016-08-05. A crafted app can supply format specifiers in a name to escalate privileges. The issue is documented in multiple sources (e.g.,...

CVE-2014-9929

CVE-2014-9929 refers to a Use of Out-of-range Pointer Offset vulnerability in WCDMA for Android CAF builds using the Linux kernel. Public entries describe the root cause as an out-of-range pointer offset (with at least one linked source labeling the issue as a Null pointer dereference). The vulne...

CVE-2014-9961

CVE-2014-9961 is disclosed for Android builds from CAF that use the Linux kernel, describing a vulnerability in eMMC write protection that can be exploited to bypass power-on write protection. The issue is exploitable locally (attack vector: local) with user interaction potentially required, and ...

CVE-2015-3867

CVE-2015-3867 is a vulnerability in Android’s libstagefright prior to 5.1.1 LMY48T where processing a specially crafted media file can cause memory corruption and remote code execution in the mediaserver service. The root cause is tied to libstagefright’s handling of media data, enabling an attac...

CVE-2015-6596

Technical details for CVE-2015-6596 are not publicly provided in the connected documents. The initial entry notes privileges via crafted apps in Android before 5.1.1, but no vendor/version-specific technical details, fixes, or exploitation information are included here. Monitor for updates.

CVE-2015-6613

CVE-2015-6613 affects Android devices running versions prior to 5.1.1 LMY48X and before 2015-11-01 on 6.0. The issue allows a local attacker via Bluetooth to send commands to a debugging port and gain privileges (Signature or SignatureOrSystem) through a crafted app. The vulnerability is tied to ...

CVE-2015-6645

CVE-2015-6645 affects Android’s SyncManager prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application can cause a denial of service by triggering a reboot loop on the device. The issue is documented in Android’s security bulletin as a Denial of Service vulnerability in SyncManager,...

CVE-2015-9009

CVE-2015-9009 is an Elevation of Privilege vulnerability in Qualcomm closed‑source components exposed via Android kernel. The public data indicates the issue affects Qualcomm/Android architectures and is classified as Critical (CVSS v3 9.8). The CVE is listed under Qualcomm closed‑source componen...

CVE-2016-2435

CVE-2016-2435 affects the NVIDIA video driver in Android on Nexus 9 devices prior to 2016-05-01. The issue allows a local attacker to escalate privileges via a crafted application (elevation of privilege in the NVIDIA video driver). Root cause: vulnerability in the NVIDIA video driver components ...

CVE-2016-3763

The CVE-2016-3763 entry concerns Android and its PAC (Proxy Auto-Config) feature. The vulnerable component is net/PacProxySelector.java used by PAC, where URL information is not restricted to scheme/host/port as required. This allows a remote attacker controlling a PAC script server to discover c...

CVE-2016-6709

CVE-2016-6709 describes an information disclosure vulnerability in Conscrypt and BoringSSL used by Android. The issue affects Android 6.x and 7.0 prior to 2016-11-01, where a MITM attacker could access sensitive data if a non-standard cipher suite is used by an application. The root cause is an i...

CVE-2016-8470

CVE-2016-8470 matches an information-disclosure issue in the MediaTek driver on Android. The vulnerability could allow a locally executed malicious app to access data outside its permission levels, due to a flaw in the MediaTek component and requires compromising a privileged process. The entry n...

CVE-2016-8480

CVE-2016-8480 is an elevation-of-privilege issue in the Qualcomm Secure Execution Environment Communicator driver on Android. It could allow a local malicious application to execute arbitrary code in the kernel context after compromising a privileged process. Affected components/conditions: Andro...

CVE-2017-0397

CVE-2017-0397 is an information-disclosure vulnerability in Android’s Mediaserver component, specifically in id3/ID3.cpp within libstagefright. The issue could allow a local malicious app to access data outside its permission levels. Affected products/versions include Android releases 4.4.4–7.1.1...

CVE-2017-0405

CVE-2017-0405 is a remote code execution vulnerability in Android’s SurfaceFlinger. The issue allows an attacker to trigger memory corruption by processing a specially crafted media file, within the SurfaceFlinger context. Affected products/versions stated in the documents are Android 7.0 and 7.1...

CVE-2017-0414

CVE-2017-0414 refers to an information-disclosure vulnerability in AOSP Messaging on Android (versions 6.0, 6.0.1, 7.0, 7.1.1). The issue allows a local malicious application to bypass OS protections that isolate app data, potentially accessing data the app should not access. The connected docume...

CVE-2017-0434

CVE-2017-0434 affects the Synaptics touchscreen driver in the Android kernel (Kernel-3.18). It is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset after compromising a privileged process....

CVE-2017-0437

CVE-2017-0437 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android. The issue could allow a local malicious app to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver, with the Android kernel versions cited as Kernel-3.10 and Kernel-3...

CVE-2017-0442

CVE-2017-0442 describes an elevation-of-privilege in the Qualcomm Wi‑Fi driver on Android, allowing a local malicious app to execute arbitrary code in the kernel context. The vulnerability, affecting Android devices with Qualcomm Wi‑Fi components, is mitigated by requiring compromise of a privile...

CVE-2017-0485

CVE-2017-0485 is a denial-of-service in Android’s Mediaserver. A specially crafted file can cause a device hang or reboot. Affected products/versions are Android 6.0, 6.0.1, 7.0, and 7.1.1. The issue arises from how Mediaserver processes media/file data, per public CVE summaries and the 2017-03 A...

CVE-2017-0551

CVE-2017-0551 is a remote denial-of-service vulnerability in Android’s Mediaserver Libavc implementation. It affects Android 6.0, 6.0.1, 7.0, and 7.1.1, where processing a specially crafted file could cause a device hang or reboot. Public details in the provided documents describe the issue and a...

CVE-2017-0602

CVE-2017-0602 describes an information-disclosure vulnerability in Bluetooth on Android that could let a local malicious app bypass OS protections that isolate app data. Affected versions span Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The vulnerability is categorized as Mode...

CVE-2017-0643

CVE-2017-0643 describes a remote denial-of-service vulnerability in Android’s Media framework (Mediaserver). The issue could be triggered by processing a specially crafted media file, leading to a device hang or reboot. Affected products/versions include Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, and ...

CVE-2017-0667

CVE-2017-0667 is an Android framework elevation of privilege vulnerability affecting Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37478824). The issue is categorized as Framework EoP; details in connected sources confirm affected component and version range but do not prov...

CVE-2017-0677

CVE-2017-0677 is a remote code execution vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CVE is listed with Android as the affected product and Android ID A-36035074. Public disclosures in connected sources confirm the issue as a media framewo...

CVE-2017-0683

CVE-2017-0683 is a high-severity remote code execution in Android’s media framework affecting Android 7.0, 7.1.1, and 7.1.2. The issue presents as a local-exploitable vulnerability requiring user interaction (UI: Required) and local attack vector, with a CVSS v3 base score of 7.8 (HIGH). The root...

CVE-2017-0685

CVE-2017-0685 is a DoS in the Android media framework affecting Android 6.0/6.0.1/7.0/7.1.1/7.1.2. The connected CNVD entry notes a DoS via the media framework with an infinite loop attack vector; no root-cause or patch details are provided in the supplied documents.

CVE-2017-0687

CVE-2017-0687 is a denial-of-service vulnerability in Android's media framework (libavc) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue targets the media framework component (libavc) and is characterized as DoS; the connected sources confirm affected versions and classify it as Do...

CVE-2017-0703

The CVE-2017-0703 entry describes an Elevation of Privilege vulnerability in Android System UI affecting Android 4.4.4 through 7.1.2. Root cause: a flaw in System UI that could allow a local attacker to escalate privileges. Impact as documented: HIGH for confidentiality, integrity, and availabili...

CVE-2017-0721

CVE-2017-0721 describes a remote code execution vulnerability in the Android media framework component libmpeg2. The issue affects Android platforms listed as versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37561455). The connected sources corroborate that this is a media-framework RCE i...

CVE-2017-0738

CVE-2017-0738 is an information-disclosure vulnerability in Android’s media framework audioserver affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents identify the issue as a flaw in audioserver that can lead to leakage of sensitive informatio...

CVE-2017-0744

CVE-2017-0744 is detailed in connected documents as an Elevation of Privilege (EoP) affecting Google device sound drivers, with a Low severity patch in the August 2017 OTA. The vulnerability is tied to NVIDIA firmware processing per the NVD entry for Android kernel, while Android bulletin section...

CVE-2017-0762

CVE-2017-0762 is a remote code execution vulnerability in Android’s media framework (libhevc). Affected versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is triggered by processing a specially crafted media file, allowing an attacker to run arbitrary code with th...

CVE-2017-0779

CVE-2017-0779 is an information-disclosure vulnerability in Android’s media framework (audioflinger) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0–6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-38340117). Public details come from NVD: CVSS2 vector AV:N/AC:M/Au:N/C:P/I:N/A:N (base 4.3) and CVSS3 vec...

CVE-2017-0787

CVE-2017-0787 is an Elevation of Privilege vulnerability in the Broadcom Wi‑Fi driver used by the Android kernel. The issue affects the Broadcom Wi‑Fi component and could permit a privileged action if exploited. The provided documents do not include explicit exploit details or affected device ver...